DPDP reference

Rule 15: Transfer of personal data outside the territory of India

Last checked 6 Nov 2026

Personal data may be transferred outside India, subject to the Data Fiduciary meeting any requirements the Central Government specifies by general or special order about making it available to a foreign State, or to a person or entity under the control of or an agency of such a State.

Applies to
Every Data Fiduciary that transfers personal data outside India.
Starts
13 May 2027 (Rule 1(4)).
Penalty
Up to ₹50 crore (s.33, Schedule item 7).
Source
G.S.R. 846(E), Digital Personal Data Protection Rules, 2025, rule 15; G.S.R. 892(E), corrigenda

Questions

Do the DPDP Rules ban foreign cloud storage?

Rule 15 allows transfer subject to the Government's requirements on making data available to foreign States. s.16 and Rule 13(4) may add limits for particular countries, data or Data Fiduciaries.

Related

Next

Join early access

Not legal advice.